Eval() is sandboxed within iFrame